diff --git a/base/packages.nix b/base/packages.nix
index ab913fd..b0d0b0a 100644
--- a/base/packages.nix
+++ b/base/packages.nix
@@ -38,7 +38,7 @@
         xsel
     ];
 
-    fonts.fonts = with pkgs; [
+    fonts.packages = with pkgs; [
         vollkorn
         alegreya alegreya-sans
         b612
diff --git a/hosts/Rupert.nix b/hosts/Rupert.nix
index df4868b..aad751c 100644
--- a/hosts/Rupert.nix
+++ b/hosts/Rupert.nix
@@ -74,6 +74,7 @@ in
     services.flatpak.enable = true;
     xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-gtk ];
     xdg.portal.enable = true;
+    xdg.portal.config.common.default = "*";
 
     hardware.bluetooth = {
         enable = true;
diff --git a/hosts/hedgedoc.nix b/hosts/hedgedoc.nix
index 336db42..b237e92 100644
--- a/hosts/hedgedoc.nix
+++ b/hosts/hedgedoc.nix
@@ -5,7 +5,6 @@ in
 {
     services.hedgedoc = {
         enable = true;
-        workDir = "/data/hedgedoc";
         environmentFile = "/secrets/hedgedoc.env";
         settings = {
             port = 7000;
diff --git a/hosts/nextcloud.nix b/hosts/nextcloud.nix
index fd907d5..c5ac748 100644
--- a/hosts/nextcloud.nix
+++ b/hosts/nextcloud.nix
@@ -6,7 +6,7 @@ in
     services.nextcloud = {
         enable = true;
         https = true;
-        package = pkgs.nextcloud26;
+        package = pkgs.nextcloud27;
         hostName = hostName;
         datadir = "/data/nextcloud";
         config = {
@@ -19,7 +19,6 @@ in
             ];
         };
         caching.redis = true;
-        enableBrokenCiphersForSSE = false;
     };
 
     services.postgresql = {
@@ -27,16 +26,14 @@ in
         ensureUsers = [
             {
                 name = "nextcloud";
-                ensurePermissions = {
-                    "DATABASE nextcloud" = "ALL PRIVILEGES";
-                };
-            }
-            {
-                name = "superuser";
-                ensurePermissions = {
-                    "ALL TABLES IN SCHEMA public" = "ALL PRIVILEGES";
-                };
+                ensureDBOwnership = true;
             }
+            # {
+            #     name = "superuser";
+            #     ensurePermissions = {
+            #         "ALL TABLES IN SCHEMA public" = "ALL PRIVILEGES";
+            #     };
+            # }
         ];
         ensureDatabases = [ "nextcloud" ];
     };